(disclosure: I work at GH on CQL)
[1] https://pwning.systems/posts/sequoia-variant-analysis/
https://securitylab.github.com/tools/codeql/license/
https://securitylab.github.com/tools/codeql/license/